$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: qblSaC8vBEvgXmkX8j8kdES6suNoKlJU6DjBoHjAR7A= Subject key identifier: 36:02:1F:74:F8:51:95:82:63:5A:D0:2F:A9:B9:5C:A5:B6:C4:B3:73 Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0B54 Signing time: Sat 18 Oct 2025 20:00:31 +0000 Manifest this update: Sat 18 Oct 2025 20:00:31 +0000 Manifest next update: Sat 25 Oct 2025 20:00:31 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: X7cJ9rMj1sFsA6RYgOZA9axOkcNBMSirR5DNpe6DeMw=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: J/8oDeRELdGOcwKCSIyZI2ucZRyx8ILa8bbFd/o79oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Oct 18 20:00:31 2025 GMT Not After : Oct 25 20:00:31 2025 GMT Subject: CN=68f3f1df-31a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1c:82:cf:8f:18:de:b0:86:e6:8c:54:cc:df: 4a:90:5e:86:a4:6b:bd:4f:89:47:49:49:08:87:b2: 69:55:97:08:1a:cb:41:2a:6f:5b:33:98:4b:0e:03: 25:c1:d9:30:fb:d4:b6:bd:be:47:4d:37:27:8a:4a: 68:a1:cc:3e:0a:f7:7b:c6:13:aa:28:ea:06:48:1f: cc:8a:2c:de:75:a5:e2:2d:98:f8:11:0b:c6:4f:5f: 7e:43:4b:62:be:76:a3:ec:6a:ee:fd:bb:be:64:c7: 68:05:1e:d9:19:1e:80:55:9c:61:9e:70:b8:17:79: 16:e6:fe:4e:dd:15:9c:d3:31:51:c8:e9:b3:56:fb: cd:b5:d3:d6:fe:04:e1:bf:00:c6:6e:3f:76:49:0b: 5c:d9:9d:1e:3a:b4:37:75:ae:24:e7:10:88:31:64: eb:04:4b:25:9c:f6:a5:96:41:5e:4f:3f:48:96:e4: db:5f:db:97:ec:1c:5e:57:29:ec:31:b0:78:34:a8: d8:ee:3e:ac:12:e4:97:b0:bf:93:f5:3b:f1:36:03: 10:2c:d5:3c:57:e9:7d:33:2d:ba:80:be:11:12:3a: 72:9e:72:d0:31:6b:ea:ca:39:6d:50:1b:27:77:5f: 49:c8:36:bd:3f:eb:5a:38:91:8a:77:9b:0e:b7:8b: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:02:1F:74:F8:51:95:82:63:5A:D0:2F:A9:B9:5C:A5:B6:C4:B3:73 X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f6:0b:6d:2a:fe:92:08:58:b7:94:b4:38:1a:6c:b5:34:8a: b4:84:81:33:48:f3:4f:92:57:bb:99:e3:2c:ee:e3:c0:db:8f: 08:e1:08:f6:b3:e7:70:6e:2d:b8:63:4a:74:00:c8:96:c4:11: 68:5e:92:4a:c3:51:b1:ee:ec:32:5f:9d:e6:d8:6f:f7:6c:e2: 5e:58:cb:13:81:c9:ce:d4:95:c0:70:c4:07:92:17:66:15:c0: 9f:5d:4c:fd:60:18:c6:bb:e2:71:9f:15:45:1c:3d:11:97:f5: 69:ba:44:3d:00:96:a3:4a:bb:90:93:a1:e7:c5:eb:f2:15:ca: f8:d9:ca:71:fa:eb:98:10:a7:b0:ac:7d:1c:a9:a5:de:a7:b7: c0:c3:4f:a9:20:86:0a:70:1b:1d:52:58:57:d5:01:be:d6:cb: 2e:56:be:ce:50:4d:a1:24:4c:ae:ba:4d:1f:2d:5d:6c:7e:69: 0c:16:dd:46:f6:ec:de:4a:0d:86:4d:e7:da:ed:ec:c9:93:85: cd:c4:86:8e:8b:f3:35:9a:f9:53:af:a6:e4:df:20:37:46:55: 4b:6d:9e:0b:c0:b1:8b:5b:a6:f2:fd:0f:63:0e:e8:df:03:6c: ff:db:80:f0:e4:f2:9c:4f:89:18:a6:18:68:75:cf:87:42:a6: 8f:ef:dc:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjUxMDE4MjAwMDMxWhcNMjUxMDI1MjAwMDMxWjAYMRYwFAYD VQQDEw02OGYzZjFkZi0zMWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xyCz48Y3rCG5oxUzN9KkF6GpGu9T4lHSUkIh7JpVZcIGstBKm9bM5hLDgMl wdkw+9S2vb5HTTcnikpoocw+Cvd7xhOqKOoGSB/MiizedaXiLZj4EQvGT19+Q0ti vnaj7Gru/bu+ZMdoBR7ZGR6AVZxhnnC4F3kW5v5O3RWc0zFRyOmzVvvNtdPW/gTh vwDGbj92SQtc2Z0eOrQ3da4k5xCIMWTrBEslnPallkFeTz9IluTbX9uX7BxeVyns MbB4NKjY7j6sEuSXsL+T9TvxNgMQLNU8V+l9My26gL4REjpynnLQMWvqyjltUBsn d19JyDa9P+taOJGKd5sOt4urRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYCH3T4 UZWCY1rQL6m5XKW2xLNzMB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN9gttKv6SCFi3lLQ4Gmy1NIq0hIEzSPNPkle7meMs7uPA248I4Qj2 s+dwbi24Y0p0AMiWxBFoXpJKw1Gx7uwyX53m2G/3bOJeWMsTgcnO1JXAcMQHkhdm FcCfXUz9YBjGu+JxnxVFHD0Rl/VpukQ9AJajSruQk6HnxevyFcr42cpx+uuYEKew rH0cqaXep7fAw0+pIIYKcBsdUlhX1QG+1ssuVr7OUE2hJEyuuk0fLV1sfmkMFt1G 9uzeSg2GTefa7ezJk4XNxIaOi/M1mvlTr6bk3yA3RlVLbZ4LwLGLW6by/Q9jDujf A2z/24Dw5PKcT4kYphhodc+HQqaP79xh -----END CERTIFICATE-----Generated at Mon Oct 20 17:08:29 2025 by rpki-client